Senior Information Security Lead – Risk, Cloud & Incident Response

Hong Kong Housing Society; Hong Kong; Vor Ort; HKD 600.000 - 940.000; Vollzeit

Jobbeschreibung

• Lead information security project implementation and drive external IT vendors, system integrators, or consultants to complete projects onschedule and within budget.
• Manage information security systems and services to ensure compliance with the organisation’s IT security policies, standards, ISO/IEC20000/27001, and regulatory requirements.
• Perform risk assessment on IT systems or projects to identify potential security weaknesses and non-compliance issues.
• Analyze emerging cyber threats across infrastructure, applications, cloud, AI, and supply chains, and recommend appropriate security solutionsand controls to mitigate the identified risks.
• Responsible for handling information security incidents and developing preventive measures.
• Leverage AI and automation technologies to enhance security investigation capabilities and improve operational efficiency.
• Assist management to develop or update IT security standards and procedures.
• Collaborate closely with IT teams and business users to ensure successful enablement of cybersecurity solutions.
• Coach and provide technical guidance to lessexperienced peers.
• Perform other ad-hoc tasks when required.

The Person:

• Degree holder in Computer Science or related discipline with relevant qualification in information security would be preferred.
• 8 years’ work experience in IT, and at least 5 years in information security in a sizable organisation.
• Solid foundation in enterprise information security domains, such as firewalls, WAF, DLP, cloud and application security, EDR/NDR, SIEM/SOAR, and DevSecOps, etc..
• Experience in implementing IT/security framework (e.g. ITIL, ISO/IEC 20000, 27001, NIST CSF, or Digital Policy Oice Practice Guide).
• Hold at least one professional information security certification, such as CISSP, CISM, CEH, CRISC, or CCSP.

Data analytics and/or programming skills, such as Python and PowerShell, for process automation will be an advantage.

Capable of defining functional and/or technical specifications for external IT consultants, vendors, or service providers to deliver solutions.

A self-motivator who has a “can-do” attitude and innovative mindset.

Proven track record in managing large-scale security projects with the ability to deliver on time and within budget.

Well organised and able to prioritise and complete tasks efficiently.

Strong interpersonal, time management, and communication skills, with proficiency in both English and Chinese.

Candidates with less work experiences may be considered for the position of Information Security Analyst.

Established in 1948, the Hong Kong Housing Society (HKHS) is an independent and not-for-profit organisation dedicated to providing quality housing for the people of Hong Kong. With the support of the Government, the Housing Society has implemented various housing schemes to meet the evolving needs of the community.

As the first non-government public housing organisation in Hong Kong and the city’s “housing laboratory”, we keep progressing with the times to explore new solutions, using our own resources or in partnership with the Government, so as to help address different housing needs. This spirit of innovation is the cornerstone of our business development.

Established in 1948, the Hong Kong Housing Society (HKHS) is an independent and not-for-profit organisation dedicated to providing quality housing for the people of Hong Kong. With the support of the Government, the Housing Society has implemented various housing schemes to meet the evolving needs of the community.

As the first non-government public housing organisation in Hong Kong and the city’s “housing laboratory”, we keep progressing with the times to explore new solutions, using our own resources or in partnership with the Government, so as to help address different housing needs. This spirit of innovation is the cornerstone of our business development.